Company
Information Security and Compliance
SecurityEngineer,SecurityOperation&VulnerabilityMonitoring
Neural analysis suggests this role is
optimal for Mid candidates.
“Security Engineer, Security Operation & Vulnerability Monitoring. Skills: Security Operations, Vulnerability Management, Incident Response, Cloud Security, AI and Automation in Security. Threat Monitoring Investigations. Deep dive into Tier 1 & Tier 2 security operations escalations”
What You'll Achieve.
enhancing our security technology stack; building AI driven security automation workflows; contributing to security operations; building a modern, multi-cloud, intelligence driven security operations capability; accelerate response times; minimize exposure; identify exploitation attempts; bridge visibility gaps throughout the patching lifecycle; drive containment, mitigation and other security outcomes
Industry & Context.
root cause analysis; autonomous threat reasoning; technical impact assessments; validating compensating controls
On-call is required
What They're Looking For.
Must Have
2-5 years of experience in Information Security, technical hands-on experience in Security Operations, technical hands-on experience in Security Engineering, technical hands-on experience in Digital Forensics, technical hands-on experience in Incident Response, technical hands-on experience in Endpoint Security, technical hands-on experience in Cloud Security, Experience in AI-augmented software development using tools like Claude Code, Codex, and Gemini, deep understanding of LLM methodologies and integration workflows, Working Experience with SIEM, Working Experience with EPP/EDR/XDR, Working Experience with SOAR, Working Experience with Cloud Security (CSPM, Container Security, etc), Working Experience with Digital Forensics software & tools, Working experience with Cloud environments like AWS, Azure and GCP, Experience in using scripting languages to automate tasks and manipulate data or programming experience, Proficiency in verbal and written English, On-call is required
Nice to Have
AI driven security automation workflows, modern, multi-cloud, intelligence driven security operations capability, agentic SOC, AI-driven agents for autonomous threat reasoning and triage, custom scripts, SOAR playbooks, Cloud Security Posture Management (CSPM), Container Security, Native Cloud Security Enhancements (AWS, Azure, GCP), Runtime Vulnerability Management, Endpoint Security enhancements, Threat Hunting, Compromise Assessments, Network/Endpoint/Cloud security reviews
What You'll Do.
Threat Monitoring Investigations
Deep dive into Tier 1 & Tier 2 security operations escalations
performing incident triage and root cause analysis
performing investigations using open source and proprietary tools
Contribute to building an agentic SOC
deploying AI-driven agents for autonomous threat reasoning and triage
Orchestrate automation workflows from initial detection to containment
utilizing custom scripts and SOAR playbooks to accelerate response times
Vulnerability Management & Response
Lead rapid response initiatives for zero-day vulnerabilities
conducting technical impact assessments and validating compensating controls to minimize exposure
Engineer multi-layered detection opportunities across the security stack to identify exploitation attempts and bridge visibility gaps throughout the patching lifecycle
take the lead and provide guidance during investigations and incidents to pivot the investigation
mitigation and other security outcomes
Lead projects and initiatives
How You'll Work.
Team & Collaboration
join our Global Cybersecurity Services Team; contributing to security operations; provide guidance during investigations and incidents
Communication Scope
Proficiency in verbal and written English
Process & Methodology
Lead projects and initiatives
Full Job Description
## Description We are looking for an intermediate level security specialist to join our Global Cybersecurity Services Team. As part of our modern cybersecurity operating model, the role will be engaged in enhancing our security technology stack, building AI driven security automation workflows and contributing to security operations. We are building a modern, multi-cloud, intelligence driven security operations capability that will heavily involve AI and automation; and will require engineering and operational skills at all levels. ## Responsibilities Threat Monitoring Investigations - Deep dive into Tier 1 & Tier 2 security operations escalations, performing incident triage and root cause analysis. Proficient in performing investigations using open source and proprietary tools, including but not limited to - EPP/EDR/XDR software, Digital Forensics tools/software, SIEM platforms, etc. AI & Automation - Contribute to building an agentic SOC by deploying AI-driven agents for autonomous threat reasoning and triage. Orchestrate automation workflows from initial detection to containment, utilizing custom scripts and SOAR playbooks to accelerate response times. Vulnerability Management & Response - Lead rapid response initiatives for zero-day vulnerabilities by conducting technical impact assessments and validating compensating controls to minimize exposure. Engineer multi-layered detection opportunities across the security stack to identify exploitation attempts and bridge visibility gaps throughout the patching lifecycle. Incident Response - Proficient in end-to-end Incident Response. Able to take the lead and provide guidance during investigations and incidents to pivot the investigation, drive containment, mitigation and other security outcomes. Proficient in cloud-native detection and CNAPP platforms. Security Projects - Lead projects and initiatives that may involve - Cloud Security Posture Management (CSPM), Container Security, Native Cloud Security Enhancements
Applying for this Security Engineer, Security Operation & Vulnerability Monitoring role?
Most applicants get filtered before a human reads their resume. See if yours makes the cut.
How to Apply on Lever
- Lever uses a streamlined one-page form — apply in under 5 minutes.
- LinkedIn import works well; review parsed data before submitting.
- The cover letter field is optional but visible to reviewers — use it to differentiate.
- Referral codes from employees can significantly boost visibility of your application.
ANONYMOUS · UNFILTERED
What do employees actually say about this company?
Real rants from real employees. Read before you apply.